curl --location '/anomalies/'{
"anomaly_kind": "string",
"dimensions": [
{
"bcc_external_recipients": {
"events": [
{
"destination": "string",
"destination_domain": "string",
"event_id": "string",
"event_timestamp": "2019-08-24T14:15:22.123Z"
}
],
"external_domains": [
"string"
]
},
"dimension": "string",
"dimension_description": "string",
"dimension_label": "string",
"event_count": 0,
"event_ids": [
"string"
],
"foreign_country": {
"countries": [
"string"
],
"logins": [
{
"assigned_country": "string",
"event_id": "string",
"event_timestamp": "2019-08-24T14:15:22.123Z",
"location": {
"city": "string",
"country": "string",
"state": "string"
}
}
]
},
"high_risk_country": {
"logins": [
{
"event_id": "string",
"event_timestamp": "2019-08-24T14:15:22.123Z",
"location": {
"city": "string",
"country": "string",
"state": "string"
},
"risk_level": "string"
}
]
},
"high_volume_external_sharing": {
"share_count": 0,
"threshold": 0
},
"impossible_travel": {
"legs": [
{
"distance_miles": 0,
"event_id": "string",
"event_timestamp": "2019-08-24T14:15:22.123Z",
"from_event_id": "string",
"from_location": {
"city": "string",
"country": "string",
"state": "string"
},
"speed_mph": 0,
"to_location": {
"city": "string",
"country": "string",
"state": "string"
}
}
]
},
"insufficient_data": true,
"mcp_tool_use_exfil_volume": {
"anomaly_score": 0,
"baseline_mean_bytes": 0,
"baseline_stddev_bytes": 0,
"bucket_date": "2019-08-24T14:15:22.123Z",
"server_history": [
{
"mcp_server": "string",
"points": [
{
"bucket_date": "2019-08-24T14:15:22.123Z",
"total_bytes": 0
}
]
}
],
"today_total_bytes": 0,
"top_contributors": [
{
"call_count": 0,
"mcp_server": "string",
"mcp_tool": "string",
"share_of_today": 0,
"total_bytes_returned": 0,
"total_bytes_sent": 0
}
],
"z_score": 0
},
"new_destination_domain": {
"new_domains": [
"string"
]
},
"new_ip_network": {
"networks": [
{
"event_id": "string",
"first_seen": "2019-08-24T14:15:22.123Z",
"last_seen": "2019-08-24T14:15:22.123Z",
"network_range": "string"
}
]
},
"non_corporate_domain": {
"domains": [
"string"
]
},
"off_hours_activity": {
"anomaly_score": 0,
"events": [
{
"event_hour_local": 0,
"event_id": "string",
"event_timestamp": "2019-08-24T14:15:22.123Z"
}
],
"timezone": "string",
"typical_hours_local": [
0
]
},
"off_role_access": {
"events": [
{
"app_categories": [
"string"
],
"app_description": "string",
"app_name": "string",
"event_id": "string",
"event_timestamp": "2019-08-24T14:15:22.123Z"
}
],
"reason": "string",
"user_department": "string",
"user_job_category": "string",
"user_job_title": "string"
},
"proxy_login": {
"has_unapproved_vpn": true,
"operators": [
{
"event_id": "string",
"is_allowed": true,
"kind": "string",
"name": "string"
}
]
},
"recipient_unique_to_user": {
"emails": [
"string"
]
},
"volumetric": {
"actual_value": 0,
"baseline_value": 0,
"bucket_size": "string",
"z_score": 0
}
}
],
"employee_email": "string",
"employee_name": "string",
"happened": "2019-08-24T14:15:22.123Z",
"id": "string"
}